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@ The present Invention is a method of protect- 
ing electronicafly published documents. It invol- 
ves operating a computer system and network 
(9) for elecb-onic publication of documents, 
indudhg the steps of: a) receiving requests for 
documents from a plurality of users (117) hav- 
ing computers with display devices (121) or 
printers (123), including with the requests un- 
ique user kJentlficatkm for each of the plurality 
of users; b) authenticating the requests from 
the plurality of users with a copyright server (7) ; 
c) using the copyright server Id direct a docu- 
ment server (3) to act upon proper authenti- 
cation of each request; d) In response to 
dlrectton from the copyright server, using a 
document server (7) to create uniquely en- 
coded, compressed and encrypted documents 
for each authenticated request, the documents 
having unique encoding corre^nding to each 
of the plurality of users, and forwarding the 
documents to each authenticated request user 
through the network (3) to corresponding 
agents of each authenticated request user, each 
of the agents being selected from display 
agents (111) and printer agents (113); and, e) 
decrypting ^and uncompressing the documents 
at each of the agents and making the docu- 
ments avaOable for use only in response to 
receiving correct secret keys provided by the 
aulhentteated request user to the agents. These 
agents are e^er pre-instaOed as software Into 
each of the plurality of users' computers, pre- 
instaBed as hardware or firmware into user 
hardware ^ected from display devices and 
printers, or are software programs transmitted 
at the time of use. 
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FIELD OF THE INVENTION 

The present invention relates to methods of pro- 
tecting electronfcally published inaterials using cryp- 
tographic protocols. The inventbn also utilizes spe- 
cial "agents" of software or hardware to have individ- 
ual requirements for display devices and/or printers to 
effect decryption and display or printing of the docu- 
ments. These nnethods are directed to Inhibiting illicit 
republication or copying of electronlcatly published 
documents. 

INFORMATION DISCLOSURE STATEMENT 

Cryptography and Identity Verification have 
been described In the prior art in conjunction with 
computer transmissions through networks. For ex- 
ample. United States Patent Na 4,393,269 describes 
a method of incorporating a one-way sequence for 
transacUon and Identity verificatton and United 
States Patent No. 4,995.082 sets forth a method of 
identif yHig subscribers and for generating and verify- 
ing electronic signatures in data exchange systems. 
United States Patent No. 5.144,665 describes a cryp- 
tographic communication method and system. Al- 
though these patents use cryptographic techniques 
and key identificatbn and access methods, none 
teaches or suggests the system <dal med herein which 
involves a combinatton of techniques to prevent iliicit 
copying and to enhance tracing of original users. 

SUMMARY OF THE INVENTION 

The present invention is a method of protecting 
electronically published documents, tt involves oper- 
ating a computer system and network for electronic 
publication of documents. Including the steps of: a) 
receiving requests for documents from a plurality of 
users having computers virfth display devices or prin- 
ters, including with the requests unique user identifi- 
cation for each of the plurality of users; b.) authenti- 
cating the requests from the plurality of users with a 
copyright server; c.) using the copyright server to di- 
red a document server to ad upon proper authenti- 
cation of each request d.) in response to direction 
from the copyright server, using a document server to 
create uniquely encoded, compressed and encrypted 
documents for each authenticated r«^uest. the docu- 
ments having unique encoding corresponding to each 
of the plurality of users, and forwarding the docu- 
ments to each auttenticated request user through the 
networi^ to corresponding agents of each authenticat- 
ed request user, each of the agents being selected 
from display ajjents and printer agents; arxJ, e.) de- 
crypting and uncompressing the documents at each 
of the agents and making the documents available for 
use only tn response to receiving correct seaet keys 
provided by the authenticated request user to the 



agents. These agents are either pre-insta!led as soft- 
ware into each of the plurality of users' computers, 
pre-installed as haixiware or firmware Into user hard- 
vware selected from display devices and printers, or 
5 are software programs transmitted at the tinr»e of use. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The present invention will be more fully under- 
70 stood when the specificatton herein is taken in con- 
junction with the appended drawings, wherein: 
Figure 1 illustrates a diagram of the overall archi- 
tecture of the present invention method of pro- 
tecting electrontcaliy published materials; 
15 Figure 2 illustrates a specific architecture for a 
present invention method using specialty hard- 
ware; and, 

Figure 3 illustrates a specific architecture for a 
present Invention method using spedalty soft- 
20 ware. 

DETAILED DESCRIPTION OF THE PRESENT 
INVENTION 

25 1. INTRODUCTION 

The increased use of facsimile has made the 
electronki transfer of paper documents more accept- 
ed. Eledronic mail, electronic bulletin boards and 
30 large networks systems make it possible to distribute 
eledronic information to large groups. Moreover, the 
proliferation of personal computers and workstations, 
the excellent quality of desktop printers and the plum- 
meting cost of storage devices for large vdumes of 
36 eledronic data have made it technok>gically feasible 
to display, prht and store documents electronicaDy. 
All of these developments have made electronic pul>- 
lishing a reality. The electronic distribution of informa- 
tion is faster, less expensive, and requires less effort 
40 than making paper copies and transporting them. 
Other fadors that favor electronic infonnation distrib- 
ution include the ability to use a computer to search 
for spedfic information, and the ability to more easily 
customize what fe being distributed to the recipients. 
45 Bectronlc newspapers, magazines and journals are 
poised to supplement, and eventually r^lace the cur- 
rent paper distribution networks. 

The advantages offered by electronic distribu- 
tions are also among the primary technical impedi- 
50 msnts to the acceptance of eledronic documents as 
a replacement for paper versions. One of the major 
technical and economic challenges faced by eledron- 
ic publishing is that of preventing individuals from 
easily copyHig and illegally distributing electronic 
55 documents. It is easier for a person who receives an 
eledronic document to forward It to a terge group than 
it is for a person who receives a paper copy of the 
same document In addition, eledronic copies are 
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more like the originals than paper copies. When an 
electronic copy is made, the original owner and the re- 
cipient have identical entities. Bootlegged copies of 
electronic documents are libely to resJt in major toss- 
es in revenue. 

Thus, the present Invention is directed to the use 
of cryptographic protocols to discourage or preverrt 
the distribution of illicit electronic copies via any avail- 
abte distribution and presentation techniQues, typi- 
cally, using printers ar^ display devices. The term 
"printer" as used herein is intended fort>road interpre- 
tation so as to incfejde machanicaJ and laser printers, 
facsimile machines, copiers, plotters, etc Likewtee, 
■display devices' should be broadly taken to include 
any device that displays documents In any form other 
than printed form. The present invention Evolves two 
alternathre approaches to making electronic docu- 
ment distributtan secure. In each case, the publisher 
enaypts the document with a secret key. In the first 
method, dB30rit>ed in Section 3.1 » spedal purpose 
hardware or f kmware in the printers and display de- 
vices decrypts the document. The user only has ao 
cess to the encrypted ver^on of the document, which 
is not useful to anyone else. 

In the second method, described in Sectbn 3.2, 
the document is decrypted In software in the reci- 
pients computer. Special purpose hardware or firm- 
ware is not required, but the bitmap is avallabte to the 
user and can be distributed. In this strategy, the pub- 
lisher encrypts the document, transmits the docu- 
ment in a page description language (hereinafter 
"PDL"). such as the well known PostScript language, 
and the decryption program produces a bitnnap. The 
publisher can easily modify the inter-line or inter- 
word epacings In the PDL version of the document to 
make each copy of the document unique. There are 
two elenrwnts of this strategy that discourages the 
distribution of Illegal copies: 

1. IHegat copies, that are in violation of the copy- 
right laws, can be traced bade to the original own- 
er. 

2. The bitmap, or an easily compressed version 
of the bitmap, has more bits than the PDL ver- 
sion, so that it costs an illegal distributor more to 
transmit the document than It does the publisher. 
This strategy also reduces the transmission cost 

to the publisher for unique document identification. 
The unique identifiers are easily removed from the 
PDL version, but not from the bitmap. Encryption 
maizes It possible for the publisher to transmit the PDL 
versfon without giving the user access to it 

The cost of a processor that capable of per- 
forming decryption is not large with respect to cost of 
printers and displays. Therefore, one should suspect 
that the first strategy will probably be used once elec- 
tronic publishing catches on. However, until electron- 
ic publishing is used on a widespread basis, it is un- 
likely that output devices with Internal decryptton ca- 



pabilities will exist. The eecond strategy may provide 
an acceptable means to achieve the purpose of the In- 
vention before specialty hardware is widely accepted. 
Although the second strategy just discourages illegal 
5 copying and does not prevent It, it makes a wider 
class of electronic publications possible. Once a rea- 
sonable set of eleclrortic publications Is available, 
special purpose hardware should become reasorv 
able. 

10 

2. ARCHITECTURE 

The basic architecture for the distribution of elec- 
tfwic doojnr^ents according to the present invention 

IS is shown In Figure 1 . Here, DocumentServer 3 (trust- 
ed by a publish©-) provides encoded, encrypted and 
compressed document to User 17. Copyright Server 
7 authenticates requests from User 17 for obtaining 
documents, and this is also trusted by a publisher. 

20 Display Agent 11 includes software trusted by pub- 
lisher which decrypts and displays the document ob- 
tained from Document Server 3. Printing Agent 1 3 in- 
cludes software trusted by a publisher which de- 
crypts and prints the document obtained from docu- 

25 ment server. Either Display Agent 1 1 or Printing Agent 
1 3, or both, or a plurality of these may be available to 
a user. 

Network 9 transports document requests and 
documents to and from the other components. User 
30 17 generates a signed request for document and will 
need to provide a secr^ key to display or print a docu- 
nr^nt 

3. PROPOSED EMBODIMENTS 

35 

Two generally sepcrate embodiments are pro- 
posed for making electronic document distribution 
secure. The first approach requires special purpose 
hardware for displaying or printing the electronkj 

40 document, and may be more appropriate when the 
hardware technology progresses to the stage virtiere 
such special purpose devices are inexpensive and 
easily available. The second approach utilizes dis- 
play devices and printers thatare available now, How- 

45 ever, both protocols use the sanrw basic architecture 
and method discussed before. 

3.1 Example 1 

50 This first embodiment, shown in Figure 2. in- 
volves a straightforward application of cryptographic 
techniques to s^d encrypted information between a 
Document Server 103, which is trusted by the pub- 
lisher, and a trusted Display Agent 11 1 and/or a trust- 

65 ed Printing Agent 11 3, The Display Agent 111 or Print- 
ing Agent ll3,contalningthesecretkey that is shared 
with the Copyright Server 107, resides witNn the spe- 
cial purpose display device 121 or printer 123 de- 
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signed for electronic publishing. TTius, Agent means 
the necessary software, hardware, end/or firmware 
lo decrypt only in response to specif ied inputs. These 
devices must bo sealed so that it is not easy to make 
copies of the hardware or f irnw^re th£tt contains the 
seaetkeyor keys. 

When the User 1 1 7 wants to view or print a docu- 
ment, he must make a requestfor a document via net- 
wc^ 109 by using a unique identif k:ation. such as a 
credit card number, or other relatively valuable num- 
ber that a user would not be willing to give away lo 
someone else for illicit purposes. The Copyright Ser- 
ver 1 07 will authenticate the User's request and then 
the Document Server 103 sends out an encrypted 
copy directly to the display device 121 or printer 123 
available to User Space 115. This document is en- 
crypted so that only a specific printer or display de- 
vice can decrypt it Since only an encrypted docu- 
m^t is seen on the network, It is not possiUe for a 
msdiclous user to gel at the document Once the die- 
player or printer receives the encrypted document, 
the device decrypts it and displays or prints it As an- 
other feature for some embodiments of the present 
invention. In order for the User to activate display or 
print functions, the User may be required to input to 
the Display or Print Agent a unique identification 
nun^ersuch as was used to make the initial request 
in these embodiments, It Is possible to prevent the 
distribution of illicil copies. The algorithm used in this 
method to encrypt infbnnnation could be any standard 
algorithnv such as DES (a known private key system- 
Digital Encryption Standard). However, this ap- 
proach requires special purpose displays and printers 
for electronic publishing, and so may be more appro- 
priate when there is a sufficient set of servtees and 
users to justify such special purpose hardware. Such 
hardware is well within the skill of the artisan, but the 
economics based on tow numbers of users would 
make it difficult to succeed commercially until wkJe- 
spread electronic publishing occurred. 

Z2 Example 2 

In this second approach, cryptographk; techni- 
ques that do notrequ&re special purpose hardware are 
used. The problem that is encountered when dealing 
with conventional displays and printers is that the in- 
formation that is displayed or printed exists in the re- 
cipient's computer. The recipient can capture the in- 
formation that will be displayed, and can distribute 
that informatfon to as many other printers and dis- 
plays as desired. Instead of trying to prevent the re- 
dpient from redistributing informatioa the objective 
will be to dtecourage the distribution of bootlegged 
copies. 

In an earlier work, it was shown that the ability to 
custom tailor copies of the journal for each recipient 
could also be used to identify the original owner of a 



document Infomtation that identifies the original 
owner is encoded into the space between the lines 
and words of text a as part of unique shifting or 
changes In word, line and character features. The in- 
3 tention of the mechanism is to discourage individuals 
from distributing journals in violation of the copyright 
laws. 

A protocol te now described by which documents 
can be distributed electronically to the subscribers 

10 and the subscribers can be discouraged from distrib- 
uting the documents electronfeaily to non-subscrib- 
ers. The algorithm used to encrypt information could 
be any standard algorithm, like RSA (an algorithm 
public key system which is well known- Revere Sha- 

15 mlrez Algorithm). The present invention invoh^es the 
novel application of ayptographlc techniques to dis- 
courage the Illegal distribution of electronic docu- 
ments. Since this example does not requre special 
purpose hardware, it is believed that this technique 

20 will help demonstrate the feasibility of electronic 
document distribution, and encourage new services 
In this area. Once there are enough users, special 
purpose hardware will be justified, and a simpler 
method like Example 1 may then be used ajccessf ul- 

25 ly from a commercial standpoint 

32.1 Overview of the Protocol 

The protocol is discussed in conjunction with Figure 
30 3 and works in the following phases: 

1. Request Generation: user u requests a docu- 
ment by sending a signed message to Copyright 
Server 207 via ^4alwork 209, including document 
details. 

35 2. Document Transmission: (a) the Copyright 
Server 207 verifies the request and if it is valid, 
it an-anges to send the document from the Docu- 
ment Server 203, (b) Document Server 203 
sends the encrypted and compressed POL ver- 

40 sion of the document to the User 217, The docu- 
ment sent to user u is also encoded or finger- 
printed with some information unique to u. (Alter- 
natively, this encoding or finger-printffig of the 
document may be performed at the user end. e.g. 

45 by the user's printer or display device.) The Copy- 
right Server 207 may also send the Display Agent 
211 and the Println9Agent213tD the User Space 
215 at this stage. 

3. Document Viewing or Printing: upon receh^ing 
so a request to display (or print) the document the 
Display Agent 211 or the Printing Agent 213 
I^ompts the User 217 to type in his/her secret 
Key, So, upon receiving which the agent decrypts 
and decompresses the received PDL document 
66 generates a bitmap and sends it to the display de- 
vice 221 or printer 223, 
Details of the Protocol 

Hereinafter, rf. c, and u refer to the Document 
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Server, the Copyright Server and the User, respec- 
tively. It is assumed that each useru has a pair of pub- 
lic and secret keys Pu and Sy. In addition, the Docu- 
mentfCopyright Server wiO have a key M;^ which will 
be used to encrypt the transnriitted documents and 
which will be embedded In the Display and Printing 
Agents so that they can decrypt the received docu- 
ments. 

Request Generation: 

m\{u,c) = [ li. document info, HSu [ u, document 
infoj 

This is a signed message from user u to Copy- 
right Server c requesting a docun^nt Document in- 
formation (like Journal, title of article, authors, etc.) is 
sent together with the user ID. u. The user ID i; helps 
the Copyright Server to look up the directory to find 
Pu, the public key of the user. In addition, the user 
signs the clear text with his/her secret key, Su. En- 
cryption E with S;, is needed to prevent malicious 
users from pretending to be who they are not, to pre- 
vent any tampering of the document request. 

DocuPfwnt Transmission: 

Copyright Server receives mi(u,c), looks up the 
directory for P^. decrypts BS^ [u, [document info]], 
and compares the dear text against the decrypted 
text If they are identical, it sends a message to the 
Document Server to send the document rrh{d,u) to 
user. The Copyright Server also sends the Display 
Agent and the Printing Agent to the user as message 
matei/) art thb stage The Display Agent and the Print- 
ing Agent have embedded in them a key which is 
EPuIMJ, i.e. the key, encrypted with the public key 
P„ of the user. 

m2(c,t/) = 5DispIayAgent],[PrintingAgentIl 
m3(d,(/) « [[Compressed Document]] 
The Display and Printing Agents are not encrypt- 
ed because nobody other than a specific user u can 
use them for decrypting an encrypted document 

The document sent to the user is a compressed 
PDL version that is encrypted with M^. Even if user u 
distributed the Display or Printing Agents, together 
with the encrypted document. It would be of no use 
unless the secret key Su was divulged as well be- 
cause the key Mk. with which the document is encrypt- 
ed, cannot be generated from 4* without S^, 

Document Viewing or Printing: 

To view (or print) a document, the Display (Print- 
ing) Agent first prompts the user fdr his secret key Sy. 
The embedded key * is decrypted with So to obtain 
the key with which the compressed document is 
decrypted. TTils is further decompressed, converted 
to a bitmap and sent to the screen (printer). 



The above protocol will allow a legitimate user to 
request a document and view it on his/her termi- 
nal/workstation as many times as desired However, 
it wl« prevent an Illegal user from doing the same 
5 even if he/she happens to copy the Display/Printing 
Agents and the encrypted document from the legal 
user The underlying assumption in the protocol Is 
that the user's secret key, Su, Is too important for the 
user to give up. If the secret key is the same as used 
10 for electronic mail signatures, system login or credit- 
card purchases, there is a strong disincentive to giv- 
ing it away to others. 

Additional precautions can be built in by some- 
how restricting the document to be displayed or print- 
15 ed on some pro-registered hardware. But this is not 
desirable as it will tie down the user to specific ma- 
chines and restrict his/her mobility. 

Once the document has been decrypted and de- 
compressed, it is available as a bitmap In the user's 
20 computer. Recall that (1) the bitmap is finger-printed 
with information specif k: to user. u. and (2) the bltnriap 
is much laiger than the compressed PDL version of 
document transmitted by the publisher. So. even if 
the user is willing to capture and transmit the much 
25 larger bitmap file, the user can only do it at the rtsk of 
incriminating himself, uriess the user makes the sig- 
nificantly larger effort required to erase the finger- 
print from the bitmap. 

30 3.2.2. Use-Once Programs as a Key-Hiding 
Mechanism 

As pointed out in Example 2. critical programs are 
required to be executed under the user control to dis- 
35 playand printdocuments. For example, there isadis- 
play or printing agent which is a trusted program with 
the pubttsher's magic key hidden in it During exe- 
cution, the display (printing) agent picks up £So[MJ 
from the right locatton, deaypts it ushg provided 
40 by the user u and used it to decrypt the encrypted 
document, htole that If the user can discover Wx by 
analyzing the code for display (printing) agent and 
stopping the execution at the right point, then the 
whole purpose of sending encrypted documents is 

45 defeated. Since this kind of reverse engineering can- 
not be completely prevented, the payoff of reverse 
engineering is reduced by sending trusted programs 
that do the same job but look different for each user. 
If documents and CNsplay/Printing agents are distrib- 

50 utBd through networks, it is relatively easy to gener- 
ate a unique copy for each recipient 

The use of use-once programs also has the ad- 
vantage that the origin d program can be readily 
traced. Modifying a binary executable to create an- 

66 other working program requires a deep understand- 
ing the program structure and any self-protection 
mechanisms (checksums) a program may employ. 
Compared to protecting printed articles, identifying 
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progrsns is relatively easy. 

For example, four different levels of security may 
t>e used: 

1. ail users have the same Dlsptay/Pilnting 
Agents containing an algoritNn that derives a key 5 
from a system identifier, 

2. the Display/Printing Agent are sentence (or at 
some time interval but unique for each user); 

3. the DIsptay/PrtntIng Agents are the same for 
each dociBoent and are transmitted wllh each io 
document; 

4. the Display/Printing Agents are unique and are 
transmitted with each document 

A number of techniques can be used for creataig 
unique, but equivalent programs automatically at the is 
compSe or link stage. For example: 

(1) the linker can reorder text and data segments; 

(2) the compiler can be instructed to randomly 
optimize certain sections of code; 

(3) sections of the code can be replaced by func- 20 
tionally equivalent, different algorithms araj, 

(4) the compiler can change the register alloca- 
tion sequence. 

Note that more elaborate an-angements for pro- 
tecting RAM access patterns and contents may be 25 
added, at the cost of reduced execution efficiency. In 
additfan. standard techniques of hkiing tell-tale code 
sequences (audi as replacing system calls to con- 
stant addresses by computed calls) should be used. 

Obviously, numerous mod'ificatfons and varta- so 
tions of the present invention are possible in light of 
the above teachings. It is therefore understood that 
within the scope of the appended daims, the inven- 
tion may be practiced otherwise than as specifically 
described herein. 35 



Claims 

1. A method of protecting electronically published 40 
documents, which comprises: 

operating a computer system and network 
for electronic publication of documents, and in- 
cluding therein the steps of: 

a. ) receiving requests for documents from a 46 
plurality of users having computers with dis- 
play devices or printers, said computers being 
connected by said network to saW computer 
system, said requests including unk^ue user 
identification for each of said plurality of so 
users; 

b. ) authenticating said requests from said 
plurality of users with a copyright server, 

c. ) using said copyright server to direct a 
document server to act upon proper authenti- 55 
cation of each raciest 

d. ) In response to direction from said copy- 
right server, using a document server to cre- 



ate encrypted documents along with a unique 
identification for each authenticated request 
and forwarding said docunr»nts to each au- 
thenticated request user through sakl net- 
work to corresponding agents of each authen- 
ticated request user, each of sakJ agents be- 
ing selected from display agents and printer 
agents; 

e. ) encoding eaid documents so that each 
document created is uniquely encoded based 
upon sakl unique Identification; and, 

f. ) decrypting said documents at each of said 
agents and making eaid documents available 
for use only in response to receiving correct 
secret keys provkled by sakl authentk^ated re- 
quest user to said agents. 

2, The method of claim 1 wherein said document 
server also compresses said documents and 
said agents uncompress said documents in re- 
sponse to receiving a correct secret key provided 
by said authenticated request user. 

3, The method of claim 1 wherein saW plurality of 
u^rs have the same agents that uses an algo- 
rithm that derives a key from a system identifier 
to allow decryption and display in subsequent re- 
sponse to a unique, correct user secret key. 

4, The method of claim 1 wherein sakl plurality of 
users receive agents with each docunent for- 
warded, all such agents being the same for a giv- 
en document and different from publication to 
publlcatloa 

5, The method of claim 1 wherein sntd plurality of 
users receive agents with each document fbr- 
watded. all such agents being different from one 
another. 

6, A method of protecting elect rmically published 
documents, which comprises: 

operating a computer system and network 
for electronic publicatton of documents and in- 
cluding therein, the steps of 

(a) receiving requests for documents from a 
plurality of users having computers with dis- 
play devices or printers, saki computers being 
connected by said network to said computer 
sy^em, said requests including unique user 
Identification for each of said plurality of 
users; 

(b) authenticating saki requests from said 
plurdity of users with a copyright server 

(c) using said copyright server to direct a 
document server to act upon proper authenti- 
cation of each request; 

(d) in response to direction from said copy- 
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right server, using a document server to cre- 
ate compressed and encrypted documents 
for each authenticated request, and forward- 
ing said documents to eat^ authenticated re- 
quest user through said network to corre- 5 
spending agents of each authenticated re- 
quest user, each of said agents being select- 
ed from display agents and printer agents; 
(e) encoding said documents so that each 
document created is uniquely encoded with to 
encoding con-esponding to each of said plur- 
ality of users; and, 

<f) (tecryptino and uncompressing said docu- 
ments at each of said agents and making said 
documents available for use only in response is 
to receiving correct secret keys provided by 
said auttienticated request user to said 
agents. 

7. The method of claim 1 or 6 wherein sad agents 70 
are pre-installed as software into each of said 
plurality of users' computers. 

8. The method ctf claim 1 or 6 wherein eald agents 

are software programs which are transmitted to 25 
said plurality of users only after requests have 
been authenticated. 

9. The method of claim 1 or 6 wherein said agents 

are pre-installed as oomputerware selected from 30 
hardware and firmware, into user hardware se- 
lected from display devices and prhlers. 

10. The method of claim 1 or 6 wherein each of said 
agents has a unique Internal code corresponding 35 
to Its user. 

11. The method of daim 1, 6. 7 or 9 wherein each of 
said agents is capable of decrypting only a sin- 
gle, uniquely encoded version of documents put>- 4C 
tished. 

12. The m^hod of daim 6 wherein said agents are 
pre-installed as firmware Into user hardware se- 
lected from display devtees and printers, and 45 
wherein each of said agents is capable of de- 
crypting only a single, uniquely encoded version 

of documents published. 

13. The method of daim 1 or 6 wherein said docu- so 
mants are uniquely encoded by the document 
server 

14. The method of daim 1 or 6 whereh said docu- 
ments are uniquely encoded after being forward- 55 
ed to each authenticated request user. 
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